Multi-stage intrusion timeline

A conceptual timeline of a multi-stage distribution grid intrusion from business network access, credential collection and remote access to SCADA through breaker operations and disrupted communications, then manual restoration and full service restoration, with the defensive function that applies at each stage underneath.